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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of 
claims in the application: 

Listing of Claims: 

1 . (Currently amended) An information processor to analyze the right 
of access to a database having a data file in a form of a structured document, 
the information processor comprising: 

a query automaton generation unit for generating a query automaton 
from a path expression in which a retrieval condition for the database is 
described; 

an access control automaton generation unit for generating an access 
control automaton from an access control policy in which an access control rule 
is described; and 

a logic operation unit for deciding access rights in database retrieval 
using the path expression by performing logic operations related to the query 
automaton generated by the query automaton generation unit and the access 
control automaton generated by the access control automaton generation unit^, 
without accessing said data file stored in said database . 



2. (Original) The information processor of claim 1 , further comprising a 
schema automaton generation unit for generating a schema automaton from a 
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schema showing a structure of the data file stored in the database wherein the 
logic operation unit performs decision of the access right in consideration for the 
schema automaton generated by the schema automaton generation unit. 

3. (Original) The information processor of claim 2, further comprising a 
path table control unit for controlling path table describing paths of the data file 
stored in the database wherein the schema automaton generation unit 
generates the schema automaton from the path table controlled by the path 
table control unit. 

4. (Original) The information processor of claim 1 , further comprising a 
path expression extraction unit for extracting the path expressions from a query 
expression specifying a retrieval method for the database. 

5. (Original) The information processor of claim 4, further comprising a 
query expression access right decision unit for deciding access rights in the 
database retrieval by the query expression based on decision results of access 
rights, which are obtained by the logic operation unit, for the individual path 
expressions extracted from the query expression. 
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6. (Currently Amended) An information processor which analyzes 
access rights to a database having a data file comprising a structured 
document, the information processor comprising: 

a path table control unit for controlling a path table describing paths of a 
data file stored in the database; and 

an access right decision unit for selecting a predetermined path in the 
path table controlled by the path table control unit by a path expression 
describing a retrieval condition for the database, applying an access control 
policy describing access control rules and deciding an access right in database 
retrieval by the path expression with respect to the predetermined path , said 
selecting, applying and deciding being performed prior to retrieving said 
structured document in said database . 



7. (Original) The information processor of claim 6, further comprising: 

a query automaton generation unit for generating a query automaton 
from a path expression in which a retrieval condition for the database is 
described; and 

an access control automaton generation unit for generating an access 
control automaton from the access control policy in which the access control 

rule is described, 

wherein the access right decision unit selects the predetermined path by 
use of the query automaton generated by the query automaton generation unit 
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and decides an access right to the predetermined path by use of the access 
control automaton generated by the access control automaton generation unit. 

8. (Original) The information processor of claim 6, further comprising a 
path expression extraction unit for extracting the path expressions from a query 
expression specifying a retrieval method for the database. 

9. (Original) The information processor of claim 8, further comprising a 
query expression access right decision unit for deciding access rights in the 
database retrieval by the query expression based on decision results of access 
rights, which are obtained by the access right decision unit, for the individual 
path expressions extracted from the query expression. 

10. (Currently amended) A database retrieval system, comprising: 
a database storing an XML document; and 

a preliminary aft access rights analysis device which decides, based on 
path expressions describing retrieval conditions used in retrieval for the 
database and an access control policy describing access control rules, to which 
one of 

1 ) always permitted, 

2) always denied, and 

3) indeterminate 
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an access right in the database retrieval using the path expressions 
corresponds , said preliminary access rights analysis device deciding said 
access rights without retrieving said XIVIL document . 

11. (Currently amended) The database retrieval system of claim 10, 
wherein the access rights analysis device includes: 

a query automaton generation unit for generating a query automaton 
from a path expression in which a retrieval condition for the database is 
described: 

an access control automaton generation unit for generating an access 
control automaton from the access control policy in which an access control rule 
is described: and 

a logic operation unit for deciding access rights in database retrieval 

using the path expression by performing logic operations related to the query 
automaton generated by the query automaton generation unit and the access 
control automaton generated by the access control automaton generation unit. 

12. (Original) The database retrieval system of claim 11, further 
comprising: 

a path expression extraction unit for extracting the path expressions from 
a query expression specifying a retrieval method for the database; and 
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a query expression access right decision unit for deciding access riglits 
in the database retrieval by the query expression based on decision results of 
access rights, which are obtained by the logic operation unit, for the individual 
path expressions extracted from the query expression. 

13. (Original) The database retrieval system of claim 10, further 
comprising the access rights analysis device including: 

a path table control unit for controlling a path table describing paths of a 
data file stored in the database; and 

an access right decision unit for selecting a predetermined path in the 
path table controlled by the path table control unit by a path expression 
describing a retrieval condition for the database, applying the access control 
policy describing the access control rules and deciding an access right in 
database retrieval by the path expression with respect to the predetermined 
path. 

14. (Original) The database retrieval system of claim 13, further 
comprising: 

a path expression extraction unit for extracting the path expressions from 
a query expression specifying a retrieval method for the database; and 

a query expression access right decision unit for deciding access rights 
in the database retrieval by the query expression based on decision results of 
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access rights, which are obtained by the access right decision unit, for the 
individual path expressions extracted from the query expression. 

15. (Original) An access rights analysis method for analyzing the right of 
access to a database storing an XML document by use of a computer, 
comprising the steps of: 

generating a query automaton from a path expression in which a retrieval 
condition for the database is described, generating an access control 
automaton from an access control policy in which an access control rule is 
described and storing the generated query automaton and access control 
automaton in a predetermined storage means; and 

performing logic operations related to the query automaton and the 
access control automaton, which are stored in the predetermined storage 
means, and deciding an access right in database retrieval using the path 
expression without checking the XML documents stored in the database. 

16. (Currently Amended) An access rights analysis method for 
analyzing the right of access to a database storing an XML document by use of 
a computer, comprising the steps of: 

selecting a predetermined path from a path table, which is stored in a s 
predetermined storage means and describes paths of a data file stored in the 
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database, by a path expression describing a retrieval condition for tine 

database; and 

applying an access control policy describing access control rules and, 
without checking the data file stored in the database, deciding an access right in 
database retrieval by the path expression with respect to the predetermined 
path. 

1 7. (Currently Amended) A program for analyzing the right of access to 
a database handling a data file as a structured document, by controlling a 
computer, the program causing the computer to function as: 

a query automaton generation means for generating a query automaton 
from a path expression in which a retrieval condition for the database is 
described; 

an access control automaton generation means for generating an access 
control automaton from an access control policy in which an access control rule 
is described; and 

a logic operation means for deciding access rights in database retrieval 
using the path expression by performing logic operations related to the 
generated query automaton and access control automaton , without accessino 

said data file . 
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18. (Currently amended) The program of claim 17, further causing the 
computer to function as; 

a path expression extraction means for extracting the path expressions 
from a query expression specifying a retrieval method for the database; and 

a query expression access right decision means for deciding access 
rights in the database retrieval by the query expression based on decision 
results of access rights for the individual path expressions extracted from the 
query expression. 

1 9. (Currently Amended) A program for analyzing the right of access to 
a database handling a data file, described in a form of a structured document, 
by controlling a computer, the program allowing the computer to function as: 

a path table control means for controlling a path table describing paths of 
a data file stored in the database; and 

an access right decision means for selecting a predetermined path in the 
path table controlled by the path table control unit by a path expression 
describing a retrieval condition for the database, applying an access control 
policy describing access control rules and deciding the presence of an access 
right in database retrieval by the path expression with respect to the 
predetermined path without accessing said data file . 
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20. (Original) Tine program of claim 19, further causing the computer to 

function as: 

a path expression extraction means for extracting the path expressions 
from a query expression specifying a retrieval method for the database; and 

a query expression access right decision means for deciding access 
rights in the database retrieval by the query expression based on decision 
results of access rights for the individual path expressions extracted from the 
query expression. 

21 . (New) The database retrieval system of claim 10 wherein, if said access 
right decided by said preliminary access rights analysis device is indeterminate, 
said database retrieval system retrieving said XML document to determine 
access rights. 



